February 13, 2018—KB4074587 (Security-only update)

None None...

KLA11200 Multiple vulnerabilties in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

WatchDog Anti-Malware Denial of Service Vulnerability

WatchDog Anti-Malware is a cloud-based, multi-engine malware scanner from WatchDogDevelopment, USA. A security vulnerability exists in the ZAMGUARD32.SYS driver file in WatchDog Anti-Malware version 2.74.186.150, which originates when the program fails to properly validate the input value of IOCt...

Iolo System Shield AntiVirus and AntiSpyware Elevation of Privilege Vulnerability

Iolo System Shield AntiVirus and AntiSpyware is an antivirus program with anti-spyware features from Iolo Technolgies, USA. A security vulnerability exists in the amp.sys driver file in Iolo System Shield AntiVirus and AntiSpyware version 5.0.0.136, which originates from the program's failure to...

nProtect AVS Denial of Service Vulnerability (CNVD-2018-02848)

nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKFsAv.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x220c20. A local user...

CVE-2018-6203

In eScan Antivirus 14.0.1400.2029, the driver file econceal.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300210C...

Malwarebytes Premium Denial of Service Vulnerability (CNVD-2018-02565)

Malwarebytes Premium is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. A security vulnerability exists in the FARFLT.SYS driver file ...

IKARUS Anti-Virus Denial of Service Vulnerability

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000084. A local user can exploit this vulnerability to cause ...

August 8, 2017—KB4034672 (Security-only update)

None None...

KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

KLA11087 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

UBUNTU-CVE-2017-0358

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation...

November 2016 Security Monthly Quality Rollup for Windows Server 2012

November 2016 Security Monthly Quality Rollup for Windows Server 2012 Summary This security updates includes improvements and fixes from update 3192406. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192406 Preview of Monthly Rollup entry...

MS16-134: Security Update for Common Log File System Driver (3193706)

The remote Windows host is missing a security update. It is, therefore, affected by multiple elevation of privilege vulnerabilities in the Windows Common Log File System CLFS driver due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2015-03730)

Microsoft Windows is a popular operating system. An elevation of privilege vulnerability exists in Microsoft Windows Kernel 'Win32k.sys', which allows local attackers to exploit the vulnerability to elevate privileges...

Microsoft Windows FastFAT NumberOfFATs Buffer Overflow Vulnerability

Talos Vulnerability Report VRT-2014-0301 Microsoft Windows FastFAT NumberOfFATs Buffer Overflow Vulnerability March 7, 2014 CVE Number CVE-2014-4115 Description An exploitable local privileged code execution vulnerability exists in the Microsoft Windows FastFAT system driver. The FastFAT system...

PT-2013-6224 · Microsoft · Windows Server 2008 R2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server 2008 SP2 Description: The IsHandleEntrySecure function in win32k.sys does not properly validate the tagPROCESSINFO pW32Job field, allowing local users to cause a denial of service via a crafted...

Mysterious Avatar rootkit with API, SDK, and Yahoo Groups for C&C communication

Early 2012 ESET company a mysterious malware, dubbed the Avatar rootkit Win32/Rootkit.Avatar, advertised in the underground forums by Russian cyber crime. "We present you here previously announced product. In connection with work on other projects, we moved the release date for the public from Ma...

PT-2013-3052 · Microsoft · Ntfs Kernel-Mode Driver +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Description: The issue allows local users to gain privileges ...

PT-2011-2079 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Windows XP versions SP2 and SP3 Windows Server 2003 version SP2 Windows Vista versions SP1 and SP2 Windows Server 2008 versions Gold, SP2, and R2 Windows 7 affected versions not specified Description: The issue arises from improper validation...